shell-security

What problem does it solve?

POSIX shell scripting often suffers from quoting errors, word splitting, and command-injection risks. This Skill provides practical guidance to write secure shell scripts across POSIX-compatible shells, reducing vulnerabilities and hard-to-trace bugs.

Core Features & Use Cases

• Safe quoting and parameter handling to prevent word splitting and glob expansion.
• Secure command construction, substitution, and use of built-in commands over external tools.
• Argument parsing safety and robust handling of user input to avoid injections and path traversal.
• Secure file operations and portable scripting practices that work across sh, dash, and ash.

Quick Start

Review a shell script and apply the guidelines to fix unsafe quoting, improve input validation, and harden command execution.